CVE-2006-1739: Mozilla Firefox

High severity, CVSS 9.3. EPSS: 8.4% chance of exploitation in the next 30 days.

The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write and buffer overflow.

Affected products

• Mozilla Firefox: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …
• Mozilla Mozilla Suite: version 1.7.6 only; version 1.7.7 only; version 1.7.8 only; version 1.7.10 only; version 1.7.11 only; version 1.7.12 only
• Mozilla Seamonkey: version 1.0 only
• Mozilla Thunderbird: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …

Published 2006-04-14. Last modified 2026-06-16.